| Revision Date: | 2006-07-18 | Version: | 637 |
| Title: | RHSA-2006:0571: gnupg security update (Moderate) |
| Description: | GnuPG is a utility for encrypting data and creating digital signatures.
An integer overflow flaw was found in GnuPG. An attacker could create a carefully crafted message packet with a large length that could cause GnuPG to crash or possibly overwrite memory when opened. (CVE-2006-3082)
All users of GnuPG are advised to upgrade to this updated package, which contains a backported patch to correct this issue.
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | CVE-2006-3082
RHSA-2006:0571
RHSA-2006:0571-01
RHSA-2006:0571-01
|
| Platform(s): | Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
| Product(s): | |
| Definition Synopsis |
| Red Hat Enterprise Linux must be installed OR Package Information
Red Hat Enterprise Linux 3 is installed
AND gnupg is earlier than 0:1.2.1-16
AND gnupg is signed with Red Hat master key
OR Package Information
Red Hat Enterprise Linux 4 is installed
AND gnupg is earlier than 0:1.2.6-5
AND gnupg is signed with Red Hat master key
|
| Definition Synopsis |
| Release Information
Red Hat Enterprise Linux 3 is installed
AND gnupg is earlier than 0:1.2.1-16
AND gnupg is signed with Red Hat master key
OR Package Information
Red Hat Enterprise Linux 4 is installed
AND gnupg is earlier than 0:1.2.6-5
AND gnupg is signed with Red Hat master key
|
| Definition Synopsis |
| Red Hat Enterprise Linux must be installed
OR Package Information
Red Hat Enterprise Linux 4 is installed
AND gnupg is earlier than 0:1.2.6-5
AND gnupg is signed with Red Hat redhatrelease2 key
|